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< )V =r — 9 iz m n -ft l> . Bt^'ftyy-r;!/? 1 — ^^^^-xiMr^^atf-o j£ , ~> 
-f ii' y x f a u , m ^ <t 7 7 -f )\/ ? - ? & m v , m^{k*-&mmhT, m 

To 

[0015] 

nf ^-ft; ^ — , it» ft < tfe l A co n. — -tF <h 4> & < tfc l AcD[slffix — i?3i> h 
(recovery agent) ffl /■! 7* 'J 7 ? * - I: i ^ TS^ft ^ tift aStf* 5 . £ n £ 

>? x > hcovi-rn^coy^-r^ - h + - ± di cusns c 1 3&« t * * . 

[0016] 

m co a « & Zf f ij tt . ai^tlLT, ^ © P ^ f£ ^ £ BJ £, & § T & 
[0 0 17] 

- 457 - ± T. 9 £ £ 

* -r , iffl©i 1 $#iTsc> *5fiSA»isi3 Ansnfc, 2 0 t« 

a 2 0 , u- - a , ■7-^x^-->a>, tfdnn^i*.^fcfcibt), & 
*oco*-?*t, l^KKDiwnxia-^t-xcosE^aisniio *> ■& 3 ^ 

, 15i»C&5 ±511, fgBJlS, #Sfl?S:cOZi>tf^-^XH^>yh I 7 — i7T- 
[0018] 

Blf'^^tlfcck'SK:, 3>h'a-^yXfA2 Oil, tAl/-f -f >^->X 
:r A 2 6*n— Kbfc^tU 2 4C8iLfe7 , at7-y--2 2 £ ^ T 3 , «F £ L 

< U , t^l/-7-f >^->XtA2 6li, VOny^hftfDWl ndows 
NT^^l/-f >^y7f u>t: = a. — ^2 0tt, Windows 
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NT77^ , ;l'i'X7A2 8 (NTFS2 8) St' ffl 7 7 ^ A ■> 7 f A 2 85, # 

•5 i: , * §g ?)i « > i£(o*^i/-TO^>'XTARa:/XH7 7-fii'y^f A 

fc: IB S 3 *1 & V» *« , W m '\t <D fc ib IZ , * % aj « , , Windows N T £ 

NTFS 2 8*#IbTRS*n5. ^ t 'J 2 4 t ^ (t S & < <!: 1 ^ © 7 7* 
'jy-->3>7"ay7A3 0 « , 7 7 !, Jt-ya>7'Pi''7S>^'f>5'-7x 
- 7 (API) 3 2 £ b T , ^^l/-^^>^~>X^A2 6;&tf:7:r-1';l'->X 
7- A 2 8i<>^-7i-7T§, 
[0019] 

3>fa-^->XrA2 Oliife, 1 ^£(1©^ 7 h 7 - ? II, 3r — # — F 

X fcf — #&£(Dl^«±<Z3ttl77l£«3 8-\, 3 > t' a - ^ y 7 t A 2 0 £ J£ T 

6 H:tb (D.Xliijj (I/O) @] ?g 3 4 £ -g- £l> „ 3>^-?->Xf A2 Oli^fe, 

, =P » 5§ '14 IB tt S B 4 0 H , ^tU 2 4 0 7 >yA7^tX^tiJI:SH/Tl 
[ 0 0 2 0 ] 

7T-r;i^->xx-A2 8 a, 77i , M»sa^t^fcj?)i;, s « -r 3 7c & © ^ a 

-f 7 F7-f/t4 2 ^^LT^il^ttB«gf 4 0 tgiStl, - ft , (1) 7 

7 -f ^ £ ffi it > # M , #m RZfmUV , (2) 7 7-f;l^f-3't7i'-tr7t 1 * 

£z$ (3) ^T-i';ws^tt^*tff-r§7tde)(»^?* ; £#tfc tntfeSfcef, 7 

7 -f ;U v X T" A 2 8 t^E- OSltA l/-f -f > ^ v' X v 1 A £ © fel t m ffi ti. E S'J ifi 

»II)b5biniJ/i<, * A > - 5 1 W >^y7fAftCtSnt77-1'il'-/7f 

A 2 8 C t5 V> T \$ # (3 O T * & . L fz ~d T , 7 7 -f 7 f A 2 8 Kit G 

n§7'nt7XH7f7^(»^f n^XHt^TB, ^"AU-^^ > if ~> 7.7- A 

[ 0 0 2 1 ] 

5F»3fittE*SI«4 0tt, #|[07r'f;M 4,-4 4 1 *»ttL, NTFS*! 
77-f*y7rA2 8 £ L T t£ 3a ^ Pf , r- ^ Hlltf- ? X h U - A C ^ t> T 
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« fig ;* n 5 . & 7 r < M; ^ 6 N T F S 7 7 -f JVMS 7 P 7 f (FC 

b) n , -enfcjR-r-s^ — ^xhu~A*issij-r-5'if#^*ft^-r*o windo 

ws NTtNTF S 2 8 B, Ji, Inside Windows NT, H 
elen Custer^f, Microsoft Press ( 1 9 9 3 ) , i 
cklXlns ide the Windows NT File System, 
Helen C u s t e r IF , Microsoft Press (1994), 
\Z i5 ^ T ?5 tfe £ tl 3 1$ , cnb0ftttt#ILT^II:IAJntH5. 0 1 [; 
*5 T ^ £ to , HTCBt3ft4J:5 t. * ^ K t i 0 , 7 7 -f iH 4 , - 4 4 . 
0 '> ft: < t t> m -D siMi , it^ftf-^5»«T5. 
[ 0 0 2 2 ] 
E F S F_g_rf_A 

*»BJ©l^»^«t:J;D, 7rrf;l'Si^fl:Stf*Rt5fcJi)C:, @ 2 k: S 
6CSStl5i;5K, Bt-^-ffc^r-fJl'v'X^A ( E F S ) H5-f/M 6 EF 
S7>^-fA7-f7*7'J (FSRTL48) 4 8 £ , EFS-y--fcfX5 0£ft« 
X , Bl^ft 7 7 'f JV r Sft^flTHS. E F S H 7 -f /t 4 6 13 , NT 

F S 2 80±HI*fl, EFSf-t'X50tI«L, 7y-1)Vftm\:3r — *M 

m -y -< — )V v- (TtB) , *«£tffi&co + -'£gu-— tf^fcgjfc-r*. ntfs2 8 

ft 7> L T , E F S H 7 -f A 4 6 , ^ fflti* F S R T L 4 8 ^fii L, T §2 CD 
<fc 5 \Z , H < , m & W & > W£&Zs4££Z$ttmTZ>?3Li£<D^?>^?>f3i7 7-1)l'z/ 

xfAt^^fr^. m m iz <£ 0 , - B.^r-fJi'^BiF^ffc^n, » s ^ « w # -ft 5 s 
h'jctuTSttsnst, at ^ ft zsl zf m m -? n -t x a , a-f ii^lt 
s a « k » t § . 

[ 0 0 2 3 ] 

N T F S 2 8 35* tO ffl ft $ tl fc Bf , E F S F 7 -f A* 4 6 tt , N T F S 2 8 «fc o 
TlfitP-^nS. NTF S 2 8(1, 4# 5g ^ U i — AfctU f O ^ U a - 
A\Z&tfZ>77-1)l$:fti£/M<fzit>(D I / OS*/^«; 

, * It U , ^ <75 # U 3. - A 53 43 ft S 7 7 -f )H: Bf # ft N a id tfs £ IS fr "T * 7 7 -f 

;W ® ff ft «t 0 I /OS*/^7 h ft ft « f S B# , E F S K 7 -f A 4 6 ft N T 

F S 2 8 l;g|St5 ( "T ft: to , 1« F7-f/\'f i->^»ASn5) . EF 
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S F 5 A" 4 6 © 10 I (t t , E F S , 7 r-f Jl'vXrA^^^ A^-f 
^;l/-5 : ->?:NTFS2 8f;Se-r-Sc T 13 CD £ 5 , NTFS2 8H, Z ft 6 
CD F S RTL 4 8;U — ^V^fefflb, 77'T;i'Bl^ftHliJ- - t: X £ -5 & 

3 — ;w? y 2? T -5 . 

[ 0 0 2 4 ] 

EFS FHA'4 6tt, Sf§»*yyXfA(D-ItLT7>-r5a-f^ 
-HEFSU--t*^5 0 tlfitSfcfeOU-* - £J JW ft * , E F 

5 f* => -i n 4 6 , Gene r a t eSe s s i onKey-f>^ — 7 x — X £ 
ftffllTEF Sf-h'X 5 Oiifil/, F 7 -f A' 4 6£EFS+>- — k'X5 0 CD Pflj 

t ?t st c m m t & rz & \z m m s n -a » -tr v -> a >^-^*iTi)o w # © pq t* 
ussn&t^Tof-i'tt, :oty ->a fflLTdf ftsns. - 

(D -fe y -> a > =^ — £ , EF S It — tf X 5 0 S CD I / Of!lffll*^ltt-r^fcJ& 
, FSRTL48MDIftfllll/l: l toTftISll5. 
[ 0 0 2 5 ] 

Wgmkyy-()l(D* — y° >m\z , EFS H 5 -f A 4 6 fl , 5* — iS'flSHifttfT* — 
?0f F (03—05, TIB) St07 7-fiM^f-^SSfutl; 

j;DEFS+)--t:X5 0 tlfl, 7 7 ^ JUg^ft + - * i 5' 7 7 < JM ^ f - 

^^-coMfT^siDM-r= 7 7-t jm^t - ^ tt , j. — if^sf^ — K3g3e - rs©-c 

, K St £ ft , *5HHIIIttl-i?i>b©*-!5»S«3ns. EFS F7-frt4 

6 H , ' © If #g £ F SRTL4 8 'v. e Jt "T S <> 

[ 0 0 2 6 ] 

# Bf ^ ft ^ ^ X h^r-f^/^-f U 7 b 'J CD Bf ^ ft X tt «f Bt ^ ft 7 7 -f ^ CD fls 
cf 3 > EFS H^-f 4 6 tt, E F S f - k'X 5 0 til b , fr^T-Mmt^ft 
* - , *J:«l{ftft7 3"f JH:»t5etft^^f-?Sjl5. E F S K ^ -f /t 

4 6HSfc, :©ffSFSRTL4 S'xfsIfS. 

[ 0 0 2 7 ] 
EFS FSRTL 

FSRTL4 8K, Bf ^ ? 7 ^ ^ & ^ 1/ 27 h U C & It S ^ ^ fx 0 , » # 

ii * S i < ^ if © 7 7 ;P y 7x r A 2 8 <D ffl CD » & b DUc 5=-" -f X 2? CD 
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«*»#A«fTton&«f. 77-f;i/r-^$ss^ft, Bmx.zfmw.-rzmit&wiio 

ft 5 & 46 K , NTFSIPg«aiy&^it5ti? a -;l,-e»5 s C <D & » . * » 
9Hi , NTFS 2 8 £ F S R T L 4 8CDP^©-f>^ — 7i - 7i ft '-ft tf , Of ft L 

■J (feAtf F5-f/t) K^LT — jRWe&O, C 5 b T , NTFS28£FSR 
TL 4 8 ©ratD-l' >?-7i-7H, 0 IE 5t « , T-^fl^ >^-7i- 
X52HT#IStl5. ittAtf, OT7f'>>yF5'f;tll, H © -f > ^ 

* ^ ^ t , <>T'7i?X*«4t5„ L L- , HIT ^ § i 5 t , * m B& ^ ft 

[ 0 0 2 8 ] 

EFS F7^A4 6 tFS RTL 4 8©n»lf H, EF Slttx-^ ( M R 
^-^Sl^0«7^-JUH) ft, 7T-f;PiStt<hUT«^3itr'i:t, E F S t 

X h IZ & V> T -fe y F5tl5J;5i;FSRTL 4 8^afS"r5't.i:ft^tf„ 

ffi ffl s n & = 

[ 0 0 2 9 ] 

? - 9 ^tmi > $ - 7 x. - x 5 2tt> *H_hfi«co7jr£i?^-^ft^m-rsx 
>y>XBFHA''\<>^-7i-XT5^#T#5i!, ^^TCDgW©fc 
tblZU. <>?-7i-^5 2li, ^-iS'Bt^ftftjtj^-rSfcfef:, E F S F 5 
•f A 4 6ft7T-f^^X^A2 8-s-f>^-7o:-X-r5tbT I B «c S *1 § . -e 
ntt^tibf , r-5'^i'f>5'-7x-^tt, ^ — & mtlzMM z n-f , 

©SfttrJKl. 4> & < £ t5 © # m ^ -fb * X hlS l/*r-^X^-7SS 
b^^iaftiT-^tiSrD-^-ht?,, lif ncti, E F S F 5 -f A* 4 6 H 

, :nb©3-;yn-^$7 7'f;i'->^fA2 8 cigL, ^ a c i d , 7 r -r 
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© «fc "5 , E F S F 5 . A' 4 6 C J; o T K i I; |J 5i T S n I 7 © 7* n 9 
8 , ) tfBAb, f OSS^EFS A4 6aHT5 0 UOffflD&JNTF 

S 2 8»&ifil», E F S H =7 -f A* 4 6 tt , ^^^-^'If^g^^ftb, EFS+h 

— tfxsotafiL-* * $ =f— $>ftt>7T-i)i'Vg^'tt: : * — 6 o siaj-r 5. -t *i 

£ © 1f $1 PS , Pl^nt^57 7-f JHl01->T + -3 >7t7, h 9 6 £ -fc «/ 
ht§TE0Si|fflFSRTL48^>^-7i-X, F i 1 eCont ro I \Z 
£ 0 > NTFS2 8^EFSK5-f; , C4 6K:«toTHSn*. £©*--n>-r=!r 
^ M 6tt, ^ © f& , 77<jySffli;btlSiT, E F S K 5> -f A 4 6 » 4- 
©H?WtBL©feS6f:, NTFS 2 8Ki^Tffi!IJn5. ^T-f^^^^— iS'^ 
If^nS&bS, JE ff ;* ^ — & ft * , NTFSn-^n^JS^n, » 
ft E F SHSCfc-sTltt^StS&^SnS. 
[ 0 0 3 3 ] 

f7 T'f JHSff^^nS^; 6 tf, F i 1 eCr e a t e zi — JWSJSStLT. 
ir7 7^)m^ft+-ai>'/?T-^!^t5S*^, h A* ry 7 7 9 

8,HEAt«FSRTL48t)i5 1 * tl <b . FSRTL4 8te, n>^ + 
XhAy^rQSi^EFS K 7 -f ;t 4 6 'x S 1 f § 0 EFS K 5 -f A* 4 6 tt , 
£ © '« £ f# D . EFSIf-tfXS 0 t if L , EFS+h — 5 0*5*7 

£7 (TIB) £ ffi ffl L T , EFSH5-fA*4 6tt, ' ©f t$ F S RTL 4 8 'vg 
L , EftCJlD, N t O f s 3 - ;U a ffi ffl L- T , F S R T L 4 8 « . ffjjESflT 
^577-fJH:oHt^-n>r + Xh9 8 €: ir y M, 77^JM^r'-^S 
# # tf . NtOfs A P I , NTFS2 81S3-fCDt7h'!?iM3 1 E 
FS F 7 ^ A 4 6 Ki 7 t < ;]/ -> X A 2 8 £ D?. Hf ft 5> "t — 5> ?t^t5^~ 

[ 0 0 3 4 ] 

gij « 3 — A* y & , F i 1 e S y s t e m C o n t r o 1 _ 1 U , a. — if fit y 

T -f )V ©fit ft W J® (E F S S ET ENCRYPT) £ , Hf ft X « # §g t 

Sl/Tty MTl^fif, EFS H5'f;146i*l:*|lT, N T F S 2 8 I: 
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i^Tffyffl^nS. JS^bT, N T F S 2 8 « , ft f 7 h $ t 7 h X (if 

U 7b, -tbTEFSF5-fA4 6a, i^S^:^ — IBtt&^JSfS. EFS_S 
E T _ E N C R Y P T £ fz , 4¥ B§ ^- ft 7" ^ X h 7 r ^© *f *fi S ft 5 

Bf , EFSt- K7S OCi^TtU. UCiD, 7 r -f ^ * K . Bf *f ft A* 

[ 0 0 3 5 ] 

N T F S 2 8 B S , E F S HHA'4 6 j&» <=> © 3 V> -3 & B# ft F 5 -f A # 

5E 7 7 -f ;U fflfPS^fc J; D . F i 1 eSys temCon t ro 1 _ 2 -f > ^ — 

^x — XS:P¥tXtiiTc N T F S 2 8 « , FSRTL4 8^n — )V £ & \Z M T % 

n- \z > uft6©3-jw?y i?i:HLTfti:feffffl£ff b*^;: tcaiti. 

iXttlf??^]^^?-?©*^^*^!^^!^!!. EF S7^H-H7 
■1" n 4 6A^*5EFS_SET_ATTR I B U T E t , EFS A*4 6 

* tt 7 7 -7 ;i/ * 9 5 s — ^ £ ISJ # i± § s& © zt — if t — H 7 -7° U ^ — v a > 
3 0*6*5EF S_GET_ATTR I B UT E t 5, 7 7-fJHJSS*Ht 

. * ffl n , a. - if at* u y ^ - & zs m m x - y x > h /i 7 y y * * - ( t ib 
) ffluh^t*, ^7-r;vBt-^ft^-§Bt^ft-r§fe«5tc^ffl s.n s . su © s 

Jft, EFS DECRYPT BEG I NM3: , tit mt 7 7 ■< )i> V> M Vi & tit & T 2> 

m , EFS-9- — h' 7; 5 0 * 6 * § . JS^LT, 7 j"f Jl' St^lTJ 

ns*T, fficD»jf^tt7r'r;u^*3v^Tii : ^$n^^i'5>fc«iE$n§o efs 

DEL ATTR I B U T E tJ , ^ © ^ ft 7 7 ;KD S S ^ H 7 1/ , 7 7 -f )V 

^^f-^&«HI«ttSfflBSt5Ct4atjR. E F S if - tf X 5 0 \Z 43 H T 

tf EF S ENCRYPT DONESfttlfc, 7 7 -f MS 

-^t ft £ JU? d 5n T T £ B# , EFSif — 5 0*6*4. 7 7 -f )V « k a , £ © 

Bt^*£cDiljf^^:"BJtg^TS«J;'5{C^iE^n§c EF S_OVERWR I T E 

ATTR I B U T E H , « ^ft 7 7 < JM'f © A 7 7 7 7 7*7 * - 7 7 b *» b £ 
TtSnSH, EFSif — k'X5 0*^*5. E F S t - t'7 5 0 li, 7 7^*1; 

o C © £ 5f< tt * 7c , 77^^^tS^nt^5H, «E*«tt3Xtt»*a*-35*jiff 
L- & V> «fc 5 , ^<D77-f;H;llft^6ftfc + -3>f*Xh9 6 © Bfl Rfc <h H 
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[ 0 0 3 6 ] 

Fi 1 eSys temCont ro l_2-f>^ — y x. — * fc£ £ fc , TffBCOF 
S C T L _ E N CRYPT I ON_FSCTL_I OCjS^bT, 7 7 < ;U -> X 
rA 2 8 Ci^TIf tffflSnS. £ ft « , 77^^01 l/jSEFS F7-f;t4 6 
CO#^^ffif:*fJfST-S'tSr, N T F S 2 8 J&* §g M T Z> m ft Z CD , E F S K y -f 
A* 4 6 N T F S 2 8 f£ E F S H 5> -f A 4 6 ( g #: ) £ fl? IS ffi £ -fr § Tz H> CD ^ © 
5: if ^. £ c 

[ 0 0 3 7 ] 

7r-<;i->'X^A2 8 « , «fft7yfJ!/l:MbTf^Xi7)i>bf-^^i*. 
JK t> fc m , * «t , * n * n. - if C £ -T W > n - )V A* y Z , A f t e r R e a 
dProces s&W.t&\Z.&mT2><, Af terReadProces s P 1U3 
, ' CD 3 — A y 57 JtS ^ L/ T , it ff 4> CD 5* — 37 * $P ft f S c Se * IK <0 W] ft K , 
02 OtllT, »Tt±0»ICB«3h5. 
[ 0 0 3 8 ] 

M . BeforeWr i teProcesste, »l^ft;7 5"f JH:^l/Tr 

w » « , :©n-jwty j©Msti/T, ^-^^BS^-ftr-So • & m a 

. 1212 l i; 1 1 T , HTCJ; Of ItiBisn?., 

[ 0 0 3 9 ] 

C 1 e anUpa-A/tyfB. N T F S 2 8 ^ X h U - A I: i I ft b }1 /c 

SS^ ift l/TM^H, 7 r -f ;p->x^A2 8 Ki^tf y'ffl^ns. c:cdb#, 

EFS F 7 -f A 4 6 li , *-Rtf i5 C, ffifflfCD^^r'JjgJi 

N T F S 2 8 *t , ^ b'J-ACitfSJftrojn-XSSirse 
, N T F S 2 8 tt , +-3>T + Xh96^ttf, Z. CD - 7° > 7 r A <D W m. 
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H^ftSntFEK6 0 tiO, E F S X 
S * - t* X 5 0 tf £ , gi 5 s ^ 1/ 5- hijA 
7r-f^^©7^tX*#t§ (NTFS 

(t5t^T0/n*iJ y^+-ftffi/BbT. 
[ 0 0 8 2 ] 
7,^ y ~y° \ 6 0 0 ^ 1 6 1 4 fc'SS J£ 
y^l 6 1 6a^RI/, E F S ^ 8 (J , 

<k*jt^bfc*»*tij3£-rSo ■€■ 5 a e> tf , 

'v. ft R b , * 21 T , E F S F 7 -f A' 4 6 tf 
ft "T 5 » X 5^ y X° 1 8 0 2 tf , EF SD- 
ijOEFS^^r-^^filb, rtEFS 
X h U - A tf E CD U# *S tf « T Rf ^ -ft 5 ft 
ft ^ ' i C ft 1 S ft o 1* l> if * tf 

77^jm h u - a a* * §s w tf ck d ut * 

[ 0 0 8 3 ] 

Vi -T ft It =k , X f 7 y 1 8 0 4 tf « V> 
7 h © S ^ U , ffi€fFEKftffifl3bT, E 
o 7f»^ 1 7 0 6 H, - tf j&J ^ - ft # 
J* . X -r y 7° 1 7 0 8 \Z £ T , E F S It 
Tft@Kj£/£T%o -ir CO « , 7 f 7 7' 1 8 
CO A X U y 7 * — £l M tt X - 5? x > h CO A 
TFEKBift, I'Jh'jMOTf 
W fP U X hai J E-OJ;5S7J't74S*t 
t i i 5 C, Ir^ 1/9 fU©EFS^? 
— ft ffi ffl b T . »f ^ {t £ ft 3 o 
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[ 0 0 8 4 ] 

* & W iz , 3-:©^f-3'X©t , ti^n>r^7,M;*5^lifitif ) f, fJe fln. 
S , IfflftF S CTL S56fft«&ftl:, II 90Xf y^l 9 fl OKiHT 

« f 5 . S C TLIf IJtttiIy*»fiIf pJiTS5. BP "6 , FSCTL_S 

E T ENCYRPT I O N <h F S CTL ENCRYPT I ON_FSCTL 

__ I O T & 5 » FSCTL SET ENCYRPT I O N tt , X MJ - A I: *f 

T 5 BfiF *t ft tr y h^^^Xte^^f^Ta^t^NTFS 2 8 # 5 . FSCT 
L — ENCRYPT I O N _ F S CTL_I OH, TB<0*ftO»fPftff5iftU& 
tffiffl ?m>Vs5^54F SCTLT?a&§ 0 
[ 0 0 8 5 ] 

FSCTL , 18 t|9 irSStlfei jt, f-^ill 0 0 
^ W O . t-* — ^ 18 iS , NTFS2 8i5S200)iaOFSCTLfftf(lil/SK9J 

-r a c t «« t €r * ± 5 & a° :/ u y ^ n - h , m tx k , e f s h 5 -f a* 4 6 & zt / 

XHEFSt-k'X 5 0 l:^tSBfPSS 5l:|fai;S)tt5fc»©E F S*^ 

^-H^ii. :r - ^ « £ , fek«$s (08) £ H: 7 7 -r a > K ;v 

'If 4K (139) S:Sft5E F Sf-^^t?)., R# * , EFS^^f-^^tff. 
«^£fc»09SW©fciS&K, EF St^J - K £ E F S 5 s — * 7 4 — ;l/ F , EF 
S U- - t* X 5 0!iUie^t*©»IftSnft^*S?n-Sty yg > * - K J; D RtF 

[ 0 0 8 6 ] 

f ffl t*^T, FSCTL_SET_ENCRYPTION^36ffSn, M X. 

«\ 7 r -f ^ 2>* «t -if fls 7* 4 V 5 V U \z * -fc A n 6 n »f , ^07 7^;n;#t 
S ^ ft tf h & * > f a . U- ^ n - H « , (P^ftty NW*>Xtt*7CS 
n§^5 jt^tS, fC±5!5:iffl:Ml/T, FEK6 0 « , tTCSMT* 5 
, u 5 H, 0 8 l:^$nfe J; 5 I:, EF St-^h, fek^^-^., fek« 
. -fe y -> a > ^ — \Z J; 0 Bt ft $ n -5 o A 7" U 7 ? + - ^ i ^ T t ^ T *s , -fey 

•>a >3-Kcj;t)i^ftsn« cttaisnftu. f-^iiii o o © « £ 
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m £ ft £ c EFSXh'J-AU. fUfflT?SSfc5tf, KOJSTSl 5 tlf; E F S 
^ ^ ^- _ ^ ,1- ^ |g 3 n § o FEKHtCaenTHSfcWTB&Ufcftl:, «6 
© BE H: , H9tS4ftftJ:5l:, tv>a> + - t 7 r'f JW\ > tl L 

T. ff ft 3 » IDISn5 7 7-f^/Oh*iHJ, 8 /t -f F 0 fi $ I; f I ^ i 5 
K . jfi ffl 7 A - )V H (09) K*HT*BC«f Sn«. 
[ 0 0 8 7 ] 

(Fi leSys temControl_l£7cl3:Fi leSys temCo 
ntrol_2^^L-, N T F S 2 8 § LTg|?nf:) FSRTL48^CD 
n — ^rCHi, #Bt5ty3-h'*It, «tt£Sft#*L, * « -fe y h 
t 5 *5 lz ffi ffl * n & o 2 t: y H©*7*3- Ktt, fi *a * # jg '14 X tt -fe y h JH 
ib^^a^-To EFSXh'J-A?)S»77^H:JibTit^Sn§l, FIL 
E_SYSTEM_CONTROL_l>5t, (JbfHONTFS 2 8 t iotfffc 
n?i i^l:) Bf ^ft t* -y b £ f; ^ > T § (C , FSRTL4 83-;i/T^ 
hTffiffl$tl5 0 ftiWC, F I LE SYSTEM CONTROL 2 l£ , 

m # ft t* v b ^ © x je a* & s t $ ft ft ^ b# , M x. vs. , a. - if a* # c ^ - if * - £ 

^ |g 1/ 7c W ft 5 fcf > 3-Jl/7f h «t D 46 ffl S ft £ . 
[ 0 0 8 8 ] 

V>"rftJ&tffi/B£ft3J&*KJ$to&-f, 1 t*y FO*7n-FB, lb f£ r E F S 
K e y B 1 o b * ± y V T & J * « ft b . ff St ft * — 'If 48 ¥ 'J ffl ffi T & 0 . 
jfi«JfcC^-=I>^^rX h-^X*SftSi^»A*ab5^t*, FSRTL4 8^\Jg^ 
T £ o 9>J CD tf «y h , Ws # rEFSXh'J-A^ttatfJ £ S Si T 3 » EFS 
X h-U-A£«#&£rK, 3. - If X HI « X - i? x > h «t y U >y 2? =*=■ - £ £ JE 
b, yri'JV/^T-i'^f-J'iili o ot^inEFS^f-^i'ltl 
x. btis^i^'^sstf , EFSt-t'xa o la^if ff^ns. 1 » ^ <d 

t73-Fli, rEFS^hU — A*#5J £ * ft L . 3. — f^X h U - ASl 

EFSRttii. EFS7-f-JH ! l:«taSn«. 
[ 0 0 8 9 ] 

^HT, El 1 9 K £ <fc , X :/ 1 9 0 0 , Bf-§-'fbbf^h^^->f'T-5 
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TL_SET_ENCYRPTIONMS*3SfrL +h ^ Zi - H B , tf y b 5 * 
>lz-TZ>Zii$:mmTZ>. *> 3 A, > -tr -> a > ^ — , A>F;K fsl — #j co /n > 
H ;i/ R & m -ft 3 fc° — * -g- tr , ICEFSf-^titfe, ft BE B W to fc «> fir 5 s - 
^lil 0 0l;fe5„ ^ftllCti, FSCTLS, NTFS 2 8HIL, NT 
F S 2 8 fit , K@b, X h U — A fir 43 T H» *t ft If y h £ ( T T fir * > T & V» & 
5 « 7 7 ^ Jl' * T ) -fe y h- b , f|*FSRTL4 8Cfiit5fc6l:FS 

RTLn — h^nfrXttj-To 

[ 0 0 9 0 ] 

X ^ <> Zf 1 9 0 0 W ffi £ to tz H & & , ENCRYPT I ON_FSCTL 
_ I O FSCTLfii, =f — 9 m jft 1 0 Ofir*3tt*51«JfeU-^D — HTPftKfflS 

nsifSiJ*5. c ^ b t , x - * x & r^-ifitsjiiijjgtjnsj (xf 

y y 1 9 0 4 ) T? » S & 6 « , If !/ n - f* *t , y^l 9 0 5l:iDTKe y 

B l obl;t«; hStlS. ifc fir , * 5> =t — ?Ai7f 7^ 1 9 0 6 l!i^Tl|gJ 
to ± 5 fir H *f £ to 13 <b tf , Xr-^l 9 0 7 , X f 7 ^ 1 9 1 4 fir to fit 3 

C£ ffl b <D M fir , ita*EFSXhiJ-Aty3-Fk'7f>|-b7ht5, 
5T&^na, X ^ — & X #5 rS7r-fAFEKi5«eStSn5j (Xf 7^1 
9 0 8) T*5&6tf. It ^ 3 - K tt , X^-y:/19 10fir43t^TKeyBlo 
bii»t*a*EFS^hu-Al:t5ih*ni. T ft to •& , W tf y h si* -fe y 
h £ to 5 » m to 6. CD -r to T fe ft V* Is. £> fif , Xf-^XH, rir-fl/^hUF 
EKi'*|i?ftSj T cfe D , f LTt7"3-Fi5, X f 7 7" 1 9 1 2 K^HT 
• Sii*EFSXhU-AKt:yhSft5. 1 ft to % , l7?©f 7 7 
FSCTLfii, Xry^l 9 1 4 fci^TSSff SftS. 
[ 0 0 9 1 ] 

12 0 fir 43 ^ t MW fir Tjk S to «£ 5 fir , *%?i<Z)fE*»^I!if^c9|ffiKtrR§t 

T S «f (X^yX°2 0 0 0) , I / O if :/ -> X A 5 6 fi£ , D Steffi 

b , ^to£IRP£bT3fi^ftXy-f;i/->X^rA2 8\ 0il A «N T F S 'vfilt 
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5 „ * -T , I R P , EFS h*7-1 , ;t4 6 ti^TgflSn, I R P £ 

m Zh m o w ^ \z m m t z> t u t is at b , sitbt, xr7^2 o o 2h^ht 

1 RPSNTFS2 8^Igtg§, X f 7 ^ 2 0 0 4 l: *5 H T , NTFS28 

t> A' y 7 r \Z HfF ft 5 s - 9 & Wi <£- & 5 . L*l/, It ^ ft 7 7 -f Jl/ !: M b T , X 
7<;!/>'X^A2 8«, Xf7^ 2 0 0 6 l;*^T, ZL<D7T-1)\/ffVmmk£tl 
f LTXf 77° 2 0 0 8 tfe^T, H^fll K 5 'f A 4 6*J«St 
K f£ fig / * — 7 C > 3 — JI/ ;t y 2? f> £ b tz. + - n > =r X h 9 6 , £ t B '» b , *» 
^#5. Xt7^2 0 1 Otfe^T, NTF S 2 8 H, AfterReadPr 
o c e s sn-Jl^A^ittil/, f-^ *#ltt 5 fc» I: , Rff *J ffc 3 >' ^ X 

- * * tf . 7f '^2 0 1 2CiHT, St ftC7'fA4 6H, r-^5«fib 
, fn^7r-fJl^yXfA28):Il,, JltltiO, X f 7 7" 2 0 1 4 I: i3 ^ T 
, X T -f )V -> X 5 s - A 2 8 , ^0D#B§^'ft5 : -^Xh^I/'O-9-7'vX^A56* 
ftU~CT7Vtr — ■> a >'\it©*STSt. l/ia, X r -f ^ -f > 5 s 2? v- > ¥ 
* iff'ttelta^ttJNT f s 2 8 wftgis^^^-^x h U - A tt , fit {fc 2 n 

T^ftt^ N T F S 2 8 H , X r 7 7° 2 0 0 6 C ^3 ^ T ^ n 

bfflxh'j-A^iit, :nb©#gx h U-A1:MH, 7. y 7 2 0 0 8 
~ 2 0 1 2£ — Bfi5ll:X*7 7"t5. 
[ 0 0 9 2 ] 

i 2 1 C ^ T S $ tl it J: 5 C , 7 7"'J ^r - v- a > 3 0 , *-7">77-f ^ 
^f-^Si*atrit*S*f 5^ (7 77 7"2 1 0 0) , I / O ^ 7* -> X r 
A 5 6 , »^^*S^ : £S«b, ^n$IRPtbTl«ft7r^Jl">X7A 

2 8, 0!| X t£ N T F S , 'vgltS. b b , gfl:, I R P H, EFS F H 

tl/T, X7 7 7 I 2 10 2l;iJl>TIRP^NTFS2 8'\ISI:S5. X y 
7° 2 1 0 4 C*HT, N T F S 2 8 tt , t t a S tl 5 7 - ^ tl SI 3 n & ^ 
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, 7 7-f;V->Xf A 2 8 li, Xt<7 7"2 1 0 6 !:it>T, u 0 7 7 'f ^ t f ft 
^ ' tS^ib, 7 f 7 7 2 1 0 8 t iHi T , A4 6 ASfilit 

ff*/^-7'>3-Jl//tyi7^bIl//: + -n>f + 7 h 9 6 , * 12 tt h , t3 
» 5 = 7t'7 7 21 1 0 l:i5^T, N T F S 2 8 tt , BeforeWri teP 
r o c e s s 3 — )V A* y ^ ft ffl b , 5 s — ^ftB£-*§-{L;-t£7c&}r, B£ -5^ ffc zi > 7=- 

* X h ft llr £f ^ - ^ £ ± + # fit ft , HSC^^LS. 7f 772 1 1 
^T. Hfftl ! 7'fA4 6 11, 7 s - ^ ft lit ft U . * tl * N T F S 2 8 -\ jg L, - 
d ft £ J: 0 , 77^72 1 1 7 7-f *>'7f A2 8H, SUM CD A y 
77l*iC^ltf ftSnfcf-^S, ^»IttEfigfi4 0^ffi#CO^?*T, T^ 
=b % , f£ * co ffi CD 7 t -Y )V\Z ft T Z> Of m n it t- X h* 7 s - * T * -5 CD «k' 3 , 

# # & tf o Rot, 77-f;M>ri7v'>^ti(Dfgi*^trNTFS2 8C5|*ia! 

^^^-^xhu-Att, m n it £ n x n & n c t \z & m ts ft & v» . n t f s 2 

8 tt . 7f7 72106t*^T^nf,ffl7h l J-A : £ilL 1 ^- bTiflb® 
U7h'J-AI:^lTX7y72 1 0 8 ~ 2 1 1 2S- t X + 7 7" t 5 . 

[ 0 0 9 3 ] 

7 7 < Ji' a p LM^JMLjLI£MM 

E F S tt a 7c , *&^$nfc7y-1';l'C0Bt^"fbS:y:^K : £$B^T-S7cJ?)fCAP 
I 3 2 ft fit 5 o Win32 Enc ryptFi le A P . I tt , B§ ^ ft 7" 
^ X h^r-fJV/y*^ U- ^ MJftlS-fJffc-rSfcJ&fcffifflSftS. 02 2 43 V> T 
S 2 ft § i 5 l: , ^ 0 A P I l; i ?) , 7 7U^r-ya>3 0 ( a. — if ) tt, X ^ 

y y 2 2 o o K*viTB&^Yb-rsfc8&©7T'f;i/«ftSittu, c co «? m u tt , 

ft ff* ft ff 5 fz 86 K , EFSt-tXB0t:^T5ffattBl/'sJE»*n5. 7fy 
7 2 2 0 2 i; * ^ T , EFSit — tf7 5 OH, a - if© fc » |; 7 7 < ^ S W * , 
Bt@f0ieilOtJ6CA7i'7 7 7'3t-5;ffSb, ^LTX^yy^ 2 0 4 
£ 43 H T , SET_ENCRYPT77-fJHJfl (FSCTL) ft f§ ft T Z> ZL iz 
KJ;Dii£^ffcGD7c86K:-?-ftftv — 7t5. 7f 7 7 2 2 0 6 t*^T, EFS-y- 
— t?7 5 0ll, 3 1:- rtffltX h 'J - A*6,r - ^ftM^-ltt), X 7=" y 7 2 2 0 
8t*HTf-j'Sg77'f ^CftSt. * * & ^ ft f£ f , HfF ^ it tf y h 77* -fc 

y h$n«.coT. 7^-^tt, f ^ x^cttatftsKii:. smmizmmt^n 
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A^J#^^^n*ST, X7'^2 2 
Sfft%Tt§&btt' (Xf77"2 2 

4 1 43 v» t wi fa s n , 5 t? a a n a 

T a 7C £ ft , BftXtH Ltt^KtSS. 

a & ^ © i; . 5 s a v 7 h u a * t sf 

TFS 2 8 »fia5^ i'f-^X h U - 

APiaSTt. E F St-t'X 5 0 I; 

i' b UlffClft^T?*5. 0 2 3 

~ 2 3 0 2 K*^T, EFSt- t* X 

ft»l:77-f^4W<. X y 7° 2 3 

Bt-^it^ + X hT*5at°-{C«#jA 
a , »R7 7-f JViflSfSff b, ^ ^ 
•^COf*, X ^ y ^23 14-2318 
it t- + X hfc43^T#^52 ; *ftfeJS 

A^ttst. cft^fiifft^T-rs 

- ^ t JS '14 6 gij t % Tc & K , 
ifc a , 77if«XH47^ U ^ h u 

2 8 a x h u - a m \z m w t ) . f 

. t^fofe, BS ^ it CO j& K v - 5? $ 
T<0^y-f;U (SfeHt7'7>f h 
$ , 77-i JHS^ft*-H, XT 
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± \z t % . m r ~? u >r - 9 s 3 > v ^ jv # & t a a ft o . « t t w s a> k & s «t 5 

, B* ^ fls R #p ft m ft fit $ ® W Jc , Ao/t-f hiSrVXJtfflKTilfSI 

* ic ff to n -5 & & k , 7 r -f ;p n ft /a kt fl? M * n § & m h & v» . e f s k , « 

^-|HttS«C0^.*-XA«, C r yp t oAP I *bfiAHSn, gSiH 
. a. - if a , XY-h*-H50!/xii7n.y h'-r^i'&i'ffl, St&SI 

k *5 v> x + - * K it v § m tic tt * # -r * o 

[ 0 0 9 6 ] 

Se.fr. * 9S "W K J: 0 . E F S « , Ti©77^f -/Xf A2 8 N 
TFS) tiBb, " til: i 0 , E F S II, ^ nfc - i«7 7-f Jl/C ( jfi 

i5!i77'j^->'3>7 , p^7Ai: ! to 1 — b# m 7 r -f jv at ft & a ti & m \ m 

7 y -f 60Stt*t-SW7 7- -f ;i/ ^ * ¥ s to , — B# ft) 3 tf — fe S fe Bf ^ ft $ 
to * o § 6 \Z , E F S h*7^A4 6tt, W i n d o w s N T 7J — )V — h*H 

- I: i 0 . n*^--77r<;VCb6mt*«fit4. 
[ 0 0 9 7 ] 

EFST-^^^^^a, f£tlC®A*©M07 7^^**^, ~ to <=> (73 A j| 

© A- 7 'J y ^ + - © f M ^ ffi 1 t: i 13 "I i' t S „ § — +f h > yn^-ht 

-£ffi/sbT. 7 7^ j^SiEtiSits, 3. - if \t , (inisnfc/^'jy^ 
+ -^7Stt5&&B) 1 1 c 1 m ^ n , *«vwi^*r#cD#ia*ie,M5*sn 

5 o 

[ 0 0 9 8 ] 

7^>H7n>iSl:iHT, E F S J; D , 3. — if « , t-^ty 
SI-hO^^^tAto-rt'. 7 7-f JKDH#ft/»i§l»t§ ^ tSSTf 5„ T fc 
tot., efs«, i^sntn&Vi&Sli, n. — *¥\zMT Z * — O 
# - h t 2> . FH>i)Jn?H, * a # tt . E F S j&J ft Bj flg & 3 86 , 1 

u- — a* *s v> t IB tt $ ti & m m y r -r )v \z to ^ t Bf n it / m m & if * - 



( 



b V , f -i X 


x ^ 






o tz 




tz & . 7 y -f ;V 






P 


h =i 




^ -ft: + X h 7? 


^ lb 


t 


■5 


. T 


75: ft t, , E 


^ ft & o c am 


X n 


b 




;i/ « 


, -5- co <fc -5 


[009 


9 ] 










til GO P 83 £e 


ia m 




b 


f IJ 


t5i5l: 


u ft & m m £ 


n. 


is 




■f- A 




W ft ft 5 ffl T -5 =fc 


5 ft 








■> X f A 


A _h © ft 75: 


a. — 


if 


CO 


Pel 1? 


ffi $ 5 s — 37 


Z> it iP If Vfc ^ 


7 ^ 


-t 




B , 


* *fi T * 3 


$ ft 7c — ^ In! 


« ft 


ft 




9fi * 


75 B§ ft ^ 


, SI 4£ 14 S. J£ 


35 14 


7l* 


26 


5 „ 




[010 


0 ] 










* fg fl « # * 


CO ^ 


X 


& 


3' ft 


# W HI J* & 


El ffi ft $ ft , 




ft 




IB ft 


IB <fe ^ n & 


W ft fg /£ T & M 


0 U 


< 


. i£ 


K: , • * » W 




J5tE , 






# fas 


tl tf c: 


[ a m <d m m & 


B£ W 


] 








[HI] 












* §g eg WW <0 


a ft 




n 




> t° a. — ? 


[02] 












m K <D a > 


5j? - 




> 


f- CO 




[03] 












5 s — ^ Bf 9r 


ft ft 








mt>T zr u y & 












[04] 














ft ft 




T 




$ n v> -5 






5 


0 







[05] 



) 2001-5169 



ntf- 


^ , 3t n ^ 


(c ^¥ 


If $ ft , z~ co 


Hf ft ft 


H JS b & 75: 


6 « 


, HI IS * # Bt 


F 5 « , 


a m m n ft t 


tt 75: 


< , e nt iff * 


75 B& ft 


s m it z> tc so 


K DL 


ffl $ ft -5 o 


. 7* — * 


* Bt ^ ft T S 


Tz *6 


CO v X -r- A 


, B«^ft 


a # WE 


ft 7i 


rL - if }c a » 


^ ^ s 


tl -5> o v' X 


A S. 


73' * ft B , 2 




* H * * « « 




a. - if k: *f T 


c n - if 


^ — ^ ^ 5 


Bf & 


if CO , flf ^ ft 


, «« * 


ft 3 o f toy 


X 5^ 


A & ?3* ^ ft tt 




•5 ffl , S ^!l 


CO 


* It flB , 




, BB ^ $ ft tz. 




CO « Sg (C * ^ 


co ffi e r 


zs m h p*u ft -a 


S 


ft S T ^ T CO 










-> X -f A 


& * ft -r ^ d 


o, 


0 T? cfe -5 o 




S ^ ft "T 7 p 






^5 V* % 7k 


^ a n > * — 


^ > 


h £ «E A « ft 


5 7i OT 


11 3 > 7}? — ^ 




ft * Jg: W ft * 



( 45 ) #812 001-516913 

«*^ftT-^©@ai:*V5TffifflSn&H5H5Ztlli3 > # - * > h & «E A 
W i: I t 7* D y 
[06] 

7 r -f ;mt ■*§■ it; a m n © & * © + - =i > ^ * x h « m & '> tz < t*>«»«i; 

[07] 

»t ^ ft 7 7 -r ;v & zs f 'a v z i- u © * © ut ft n > # — y v © m t m m. & 

[08] 

st * it * - fflf fg £ tr ^ 7 -f « fS * ffi s K a IS t -5 86 © - © n > # - * 

[09] 

Bt^ft + — , itffi : £-B-^77-f^'itis ; £ffis^a{t-r^fcJ5© — ^cd^j># — * 

[010] 

*f6BJ© 1 -d CD ffi $ K ± 0 , 7 7WJP*H<XH;ffs6t«fcJ60^ill7n- 

[011] 

7 7^J^f|<XHf«t5-g5tbT-S«l;llS|a5 ^7^^15117 
f -y 7°5:SItSinBT$§ 0 
[012] 

7T'f;^-7'>lf^Sl5l5fc»!;77-l'Jl'y7,fil:l9Tlffl?tl?> 
Xr77lSfctSniTfe5„ 
[013] 

* 51 HJ © 1 Ofl3jB«C± Sf ^ ft ;7 7 ^ ;i, £ M < x KU1^ ~r -5 i?> K: 3 - ^ 
7^hl:J;t)TSl^n5-S?W&7r7 7°S*fctSn0T*5. 
[014] 



( 46 ) 2001-516913 







[ a 


1 5 ] 












7 


7 


)v & m 


< X 










zf 


& * 


to T Sit 


ti EI 


T & % o 










[ El 


1 6 ] 












7 




;p s n 


< X 


K * t" S — fiU <h L/T 


— IS C S ffl S tl s 




y 


7° 




to T St 


tl El 


T $> 5 o 










[ 0 


1 7 ] 












7 


7 -f 


)]/ £ M 


< X 




— fix f~ S ffl £ tL Z> 




y 


~f 


ft * 


to T SE 


tl El 


T ab £ o 










[ ei 


1 8 ] 












7 


7 -f 


;p £ H 


< X 








y 


7° 




to IT St 




T afe £ 0 










[ 0 


1 9 ] 












7 


7 ■< 


)V M 


< X 


f 1 I / J y%J V C*V 1-41"* — - >-*^ 


— fix HI M $ tl S 


F 5 -Y /\ ? ^ ffi a X 


y 


7° 




to "3" SE 


tl El 


it a5 s o 










[ El 


2 0 ] 












7 


7 -f 


;u st * 






U 5 ^ 5 ft 3 > 


— ^ > M: i o T S 




$ 


ti s 


7 ~t~ y 


7° & 












[ El 


2 1 ] 












7 


7 -f 


JU # # 




5 jfc £ fx D & -5 S5 \z 


^ 5 ^ 5 a ^ > 7$ 


— ^ > hici^TS 


m £ 




7 y 


~? ft 












[ El 


2 2 ] 












IS 






7- ^ 














> 7^ 


- * > h I; i o T i ffl 


Z tl>b y 7° % 




o 




[ El 


2 3 ] 












IE 


te H» # 1t 7 


7 








3! 


> 




* > h 









( 47 ) 



^20 0 1-5 169 13 



[01] 



20 



34 



50" 



mm 



36 



38- 



- I/O 



22 



1 



58 



EFS 



7- 



API 



i i 



-30 



32 



APIS j 



7 7-f^>-7l^A(NTFS) 




9> 




77-fJH 



J*. HJ —A 



xhy - a 



44, 



n 



44 



( 48 ) 



mm 2001-516913 



[02] 



30 



58 



32 



WIN32 l/>f if 



zl— tTE- K 



if 'J Zf h API 



50 



l/Ox"*-^ 



7 7 -< JU^X^" A 
(NTFS) 



55 



.54- 




46 



28 



EFS 

It- tiX/K^-fA 



52 



mm 




48 



«NWfc 



( 49 ) 



2001-516913 



[03] 



64 



66 



70 



72 



t 



60 



78 



mm 




74 



76 



"7^ — $ 

7? ^ — ;U K 



Sis 



■MMt 



7 



82 



( 50 ) 



#S 2001-516913 



[04] 



W4b7 7-OU 



mm 



mm. 

7 -r K 



□.-if© 



70 



68 



74 



84 



7 7^^ 



Rf^Hb 

4^- 



I 



mm 



88 



64 



60 



86 



[05] 



Hf-Sf-fb 




mm 



82 



.90 



I 



77^ 



"X"' — 



88 



64 



60 



92 



( 51 ) 



'Wm 2001-516913 



[06] 



9*1 



9 4 2 



94, 



94n 



94- 



* MJ-A 

mm 



* MJ-A 

mm 

Zfn ys? 3 



X h'J —A 



SCBs 



3 >^+X h F2 



4=— 

=i >7^+X h Fm 
(m<=n)) 



96- 



96- 



96 



n 



im 7 ] 



98 1 



EFS 

7'a>>^ F1 

IRPtf -T >^ 
EFSjt ^ 



9B B 



EFS 
4» F8 



98 13 



98 



EFS 
-?n y£ FT 3 



EFS 
7'P Fn 



98 



( 52 ) 



2001-516913 



[08] 















EFS 


EFS-T-* : FEK 


[FEK] SK 


$EFS 



100 

[09] 



J 



-fe * -> 3 - IC cfc S Hf ^fb 















EFS ' 

■y-y=i-K 


EFSt-'-^ : SK,H,H 


[SK, H, H} SK 


$EFS 



100 



( 53 ) 



#SE 2001-516913 



[ El 1 0 ] 



1000 



100S 



1010 



1012 



1014 



mm 



NTCreateFile, 
NTOpenFile 



1002 — " 


~~i lopCreateFile / 




i 


r 






1004 — — — 


( m 


11) 



I 



NTFSM 
( II 12) 



( m is) 




lopCreateFile j 

NTCreateFile, 
NTOpenFile 

I 



1008 



*— ^>FSRTL 

K El 13) 



( 54 ) 



# 2001-516913 



[011] 



— i 



1100 



1102 



1104 




IRP£r 



I 



EFSH >T^r^, h 



I 





IRP^NTFS^ 












( ISP 12^) 




1 


r 



( 55 ) 



#H 2001-516913 



[012] 



1202 



1204 



NO 



mm 



1200 



NO 





YES 



FSRTLrj — )\,y £ 
( S13^) 



NO 



1208 



NTFS 
&3 



1210 



( 56 ) 



2001-516913 



[013] 



( 



(FSRTLJOMtt 



1300 




5 



YES 



1304 







1302 — ~ 


3=".i — >£r 




f!3" 



1332 



7 s * \sO h'J 




1310 



1312 



1314 



-fey KU 

"Sf7 7-<^FSS* 



4 



?itV 



bis, 

i 




1324 



+ T •> V" jx ^ 1 fj 
?SLV h-f^i 



HS-SHbtf';/ h£ 



1326 



1328 



EFS-f^/^--^>D-^ 
79 hW^T( gno^s) 



> 



( 58 ) 



2001-516913 



[015] 



C 




1506 




( 57 ) 



2001-516913 



[014] 



c 



EI 1 3^ £ 



1400 



1402 







r 






$EFS^£ 
















r 

























1404 




YES 



NO 



IX 



1406 



m\ sty h-r-s 



1408 





YES 



IT 



1410 



NO 



c 



13^ 



( 59 ) 



&m. 2001-51691 3 



1 6 ] 



1614 



1602 




EPS* #7*— 9\Z.£. V 



■c 



mi 9-% 



NO 



1612 



FEK£6ft*Nfc (t*— A). 



( 60 ) 



W * 2001-516913 



[ El 1 7 ] 



1700 



C 



m i6#e> 



3 



IRPlc£(7-5^:£: 



1702 



SrFEKtEFSX £g3fc-T 5 

EFS-y— /N^^tKttif 



1704 



3>7^+X FO&£U 



1708 



XI 



1706 



NO 



(it— /x) 




YES 1710 




FEKfc^UEFS^^^-^X h 'J -A* 
^"Cv * ^ U $/ £ + -l= J: U FEK £ Bf ^ffc 



m 1 6s\ 

(EFS 



( 61 ) 



2001-516913 



[ El 1 8 ] 



c 



1800 



HI 1 6#><b 

—i — 



3 



I 



1802 



^tefs* ^ t=- tS' ^^^-r -5 

EFSIt-A^^ttit 









1804 — 














(tf 







1806 



1808 



LA 



NO 



00— Ji) 




1810 



YES 



^FEKlCcfcUEFS.**?-* 

FEK^it-^-fk-r-5 c-y— /f) 



I 



jU 1 6^ 



{ 62 ) 



#ij2 001-516913 



[019] 



1904 



1902 



YES 



FSCTL. SET_ENCRYPTION-£ 




1908 



1912 



NO 




EFS-y-7"a- 
EPS KeyBlob£ 



EFS-y-^'n — k = 
EFSXMJ-A£ 



1906 



1910 



EFSKeyBlob^-iz-v hU 
EFS* MJ-A***i&tf 



1914 



Til 




S^i&^-EFS 



FSCTL ENCRYPTION FSCTL IO* 



Ell 6 CXJi 0 15) 



( 63 ) 



2001-516913 



[020] 



2000 




2010 



2012 



2014 



64 



2001-516913 



[021] 



2100 



2102 



2104 



I 



H^-l'/^fiNTFS'SiS-r 



2106 




2110 



2108 




(NTFS)SS-§ 

i — 

* -'If tt. j^M^ic^y 



2112 



211- 



I 



NTFS's®^ 



I 



NTFSrifr— 



( 65 ) 



2001-516913 



[022] 



/TPS 



2200 



i 



5 



2202- 



EFS-y— txii 
^- - ^ > 7 7 -f ju^m^< u . 



2204 



I 



(SET ENCRYPT 7 7-4)\*WWJ^ — K 



220S 



2208- 



=3 t = »fCfe(t-5 



2210 



2216 




YES 



2212 



YES 



2214 



<3 



( 66 ) 



2001-516913 



[ HI 2 3 ] 



2300 



I 



2302- 



2312 



EFStf— bf^tt 



2305 



2308 



2310 



J* h'J— A*»£ 




1 



7 7 << JU ^ * BJ K L, . 
(SET_ENCRYPYT7 7^JUflJ?3|3t(-^'=l- K 

-mm) . 



2314 



a 



3 fcf— 7 7 -f /H*3<E 



T 



YES 



a tf — in 6 



> 



( 67 ) 



:f#S?2 001-516913 



[ h re m * m ft ] 



INTERNATIONAL SEARCH REPORT 


h mt(ono> AopL'ooifon Na 

PCT/US 98/19049 


a. classification of subject matter 
IPC 6 G06F1/00 




According to Irt&maiiona! Patent Classification (IPC) or to both national cJawlfioaHon and IPC 




FIELDS SEARCHED 


Minimum documanlairon searched (cteseifiealion system followed ou olaeeification symbol el 

IPC 6 G06F 



Documentation searched olherthan minimum documentation to ihe extant that suoh documents are included In the fields searched 
Electronic data basa consulted durlngtha international search (name of data bae*ard, wher* ptactlcal, search terms ueed} 



C. DOCUMENTS CONSIDERED TO BE RELEVANT 



Category ' 



Citato n of document, with aidlcattorv where appropriate, ol the relevant passages 



Ftelevanl to daim No. 



EP 0 681 233 A (IBM) 8 November 1995 



see ftgures 1-5,7,14,15 

see column 2, line 47 - column 6, line 57 

see column 8, line 49 - column 13, line 48 



1-5, 

9-12,14, 
17-20, 
22,24, 
25, 

27-30,39 



[ X| further -documents are lifted m the continuation ofbox C. 



ID 



patent lamiy members are Meted in annex. 



■ Special categories of cited documents : 

'■A" doci^entdafiriingths^anonalBtatoof the art which is not 

considered to ho of parttauiar relevance 
"E" earlier document but published on or after the international 

filing dale 

"L w document which may throw doubts on priori? cia!rn(el or 
which b cited to establterttha publication date or another 
citation or other special reason (as specified) 

"O" document referring to an oral dlsoloaura, use, exhibition or 
other muno 

■P" doajmerrtpiibtfshed prior to the international fling date but 
later than the priority date claimed 



T later document pubJiphed after the international fling dare 
or priority date and not in conflict with the application but 
cited to understand the principle or theory underlying lha 
Invention 

°X n document ol particular relevance; the claimed irwentfcm 
cannot be oonefdered novel or cannot be canaidarad to 
involve art inventive sep whan the document id token Bione 

"Y" document oi particular refwanesa; the dalmad invention 

cannot be considered to invoke an Inventive step when me 
document ia combined with one or more other ouch docu- 
ments, auch combination being obvious to a person, skilled 
in the art. 

document member of the same patent family 



Date of Ihe actual correlation of the international *o*reh 

16 February 1999 


Oslo of mcJtin™ of the irtorniiiona! search repert 

23/02/1999 


Name and mailing address of the ISA 

European Patent Office, P.EU 5B1B Patentlaan 2 
NU- 2280 MV RIJswIJK 
Tel. <-»<31-70> 340-2040, T* 31 651 apo nl, 
Fax: (+31-70* 340-3015 


Authorized officer 

Weiss, P 



Form PCT7JSWH10 (second sheet) (JuiyiGW) 



page 1 of 2 



( 68 ) 



#31 2001-516913 



INTERNATIONAL SEARCH REPORT 



fl iMMtat AppUoutfuh No 

PCT/US 98/19049 



C[CotrttnuaUon) DOCUMENTS CONSIDERED TO BE RELEVANT 



Category ' 



Citation of dacumwii, with IncMc&Upn.vfriere approprtelet of tis relevant passages 



Relevant to claim No. 



US 5 319 705 A (HALTER BERNARD J ET AL) 
7 June 1994 



see figures i-4 4 11,12 
see figures 14-16 

see column 7, line 44 - column 11, line 8 
see column 23, line 51 - column 26 } line 
22 



1~5, 

9-11,14, 
17-19, 
22,24, 
25,27,28 



Fonn PCT71&A/21C (confliruwton ol saoaid steal) (July lasej 



page 2 of Z 



( 69 ) 



mm2 001-51 6. 9 13 



INTERNATIONAL SEARCH REPORT 

Inf ormsrtltwi qir patent family members 



It .atloneJ Application Ho 

PCT/US 98/19049 



Patent document 
Gited in search report 



Pubfl cation 



Patent Gamily 
member(s) 



Publication 
date 



EP 068X233 



08-11-1995 



US 
CA 
JP 
US 



B598470 A 
2145922 A 
7306780 A 
5757908 A 



US 5319705 



07-06-1994 



JP 



7093148 A 



28-01-1997 
26-10-1995 
21-11-1995 
26-05-1998 



07-04-1995 



Form PCT/iSAGJia<pEtwit kmfiy *nn*0 (JMiyi9K» 



( 70 ) 



2001-516913 



7n>K- i?(DWi^ 

(W^mm iS—tf ^XUyh 

7*V2J&mm 98007 «7^>h>« 

^;nf a.— y — x -f-xh 36 xh 

U — h ^->A— 5>x-f-7 14557 
(72)SS9!# ^* 5^>P>y 

7 * U * MB 98006 -7 -> > h >W 
^ta- li-^X I'-Xf 57 :7V 
-fX 16658 

a2)mmm try- 5^-ax ^u a -. 

=-7 

7*VZl-e?Mm 98053 "7->>h>!W 
I/yH^K /— X -f— Xh 56 X 
h'J-h 22119 
(72)§gi/!# *^5> ^-X XX. 

98011 Vi/>h>n\ 

- y— x -r-xh 95 xv-r 

X 20048 

(72)f£Bj|# W^JW DA-h tf- 

TXU^^HI 98053 *7 5/>f»>W 
k7h' : &>F y-X -f-Xh 17 X 
hU— h 20920 

(72)§gW# 7>FUa- 77^77 

7^'JA -&^ffl 98052 «7 -> > h >#l 
F ; E> K y— X -f— Xh 146 
T^-rt— 7706 

(72) 56eh# y-ry- 5*^— . 

7/U*Mi 98033 <7->>h>#| 

#-^7>F y-x -r-xh 43 x° 

W7 11820 

(72)fgHJ# 5 =y — I 77 i?x-f . 

7/'J* £-$RS 98004 "7 -> > h >jW 
^b'a- y— X -f— Xh 47 Xh 
U-h 9015 
F^— A(##) 5B017 AA03 BA07 CA16 
5B076 FA00 
5B082 GA11 

5 J 104 AA16 EA04 EA06 EA19 JA21 
NA03 



